$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/28301e07-2824-4e0b-9659-f5da81f88222.cer File: 28301e07-2824-4e0b-9659-f5da81f88222.cer (raw, json) Hash identifier: oYeHU8pLDmqRSKTYXNjWyHD0WhWbTKUUkei+bCCU9qw= Subject key identifier: FB:4A:8C:E3:F3:81:05:93:B1:D8:16:09:43:C2:8C:A5:26:A1:49:66 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F432858424DB0845EE2D641F9807D9CA8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/28301e07-2824-4e0b-9659-f5da81f88222/28301e07-2824-4e0b-9659-f5da81f88222.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/28301e07-2824-4e0b-9659-f5da81f88222/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 22 Jun 2023 11:18:10 +0000 Certificate not after: Wed 24 Sep 2025 11:18:10 +0000 Subordinate resources: AS: 18936 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:42:4d:b0:84:5e:e2:d6:41:f9:80:7d:9c:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Jun 22 11:18:10 2023 GMT Not After : Sep 24 11:18:10 2025 GMT Subject: CN=28301e07-2824-4e0b-9659-f5da81f88222 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:68:92:5c:a1:35:be:65:13:0b:33:75:30:e9: 1c:eb:98:30:42:d7:46:91:b5:a1:30:81:fc:63:de: a2:83:66:90:3f:42:51:73:7f:f9:d3:1f:26:0e:19: 25:ee:06:6a:ef:58:4e:07:79:11:77:d3:6f:45:a0: f7:74:c1:44:47:de:12:c9:b5:c7:9f:71:11:b7:e1: 76:02:ae:75:d4:7b:7d:0e:0b:79:24:ea:39:a1:55: 59:62:3f:4c:a6:92:bc:52:4d:d6:5e:70:c2:8b:e8: 12:91:66:27:32:c6:7a:1e:53:dd:90:22:7c:fd:94: 40:cc:47:32:6a:1a:1b:84:cf:30:f8:30:5e:b7:b7: 71:02:47:99:50:3b:24:e0:0b:84:4f:44:53:dc:90: 09:ed:e5:15:15:56:70:fd:f0:6d:3e:4a:bc:9d:61: f0:3a:cd:9a:94:1a:ba:38:25:0d:5f:80:f9:70:86: 82:cd:ac:de:de:7d:22:98:5e:31:08:a2:1f:48:f9: 17:6f:55:a7:7d:50:c2:37:4e:a9:15:93:81:27:59: 4c:ba:67:2b:59:50:70:90:5a:46:dd:2a:f6:9f:02: c9:de:21:a1:e5:5c:28:b9:ed:bd:64:d9:b9:ce:f1: e3:fd:11:2d:25:14:8f:fa:d4:8b:b2:a3:1f:23:a6: d3:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:4A:8C:E3:F3:81:05:93:B1:D8:16:09:43:C2:8C:A5:26:A1:49:66 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/28301e07-2824-4e0b-9659-f5da81f88222/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/28301e07-2824-4e0b-9659-f5da81f88222/28301e07-2824-4e0b-9659-f5da81f88222.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 18936 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:23:9d:5b:f9:a1:a4:e3:8a:66:19:1a:77:fa:73:db:21:31: 8d:fa:a4:1a:e3:d0:e6:3a:dc:12:2e:de:51:0c:fd:0d:7d:0f: 7a:e2:90:14:cd:82:85:77:10:d1:03:94:81:3a:14:8b:be:fb: 6a:f2:01:5d:e4:cd:e6:c2:a6:18:a3:12:9f:64:41:d3:6a:b4: d2:c1:26:7d:6a:be:99:1f:93:12:d9:dc:a2:e6:3d:c6:5b:37: 6d:5f:24:ec:c7:12:23:ed:cb:65:9b:cb:98:65:4a:8f:54:64: 3d:c5:76:ce:bf:08:58:a6:8d:90:9c:85:22:92:63:6b:b2:ad: 8d:5f:1f:b9:6f:38:9c:1d:9f:06:cb:ef:ac:ae:2b:7d:e6:e7: 61:88:cc:5e:40:80:09:33:ec:76:ef:59:6c:7b:1e:12:c7:54: cb:7f:c0:53:f8:cd:f8:14:c6:2e:35:66:58:ae:24:43:ac:27: 19:1e:7a:c4:61:67:c6:6f:37:15:a6:80:48:a1:bb:ac:f4:9b: 1e:d7:1d:e3:0d:44:15:4a:65:b0:d1:3a:04:6b:b7:5a:69:03: 0d:3e:51:be:93:e0:6f:0a:24:37:23:cc:e8:b8:23:3d:fa:2e: f0:cc:22:f7:82:05:c5:76:99:08:56:ef:22:46:32:7d:d5:77: 1e:f8:fd:e1 -----BEGIN CERTIFICATE----- MIIG5zCCBc+gAwIBAgIUAQ0Mn0MoWEJNsIRe4tZB+YB9nKgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTIzMDYyMjExMTgxMFoXDTI1MDkyNDExMTgxMFowLzEtMCsGA1UEAxMk MjgzMDFlMDctMjgyNC00ZTBiLTk2NTktZjVkYTgxZjg4MjIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgGiSXKE1vmUTCzN1MOkc65gwQtdGkbWhMIH8 Y96ig2aQP0JRc3/50x8mDhkl7gZq71hOB3kRd9NvRaD3dMFER94SybXHn3ERt+F2 Aq511Ht9Dgt5JOo5oVVZYj9MppK8Uk3WXnDCi+gSkWYnMsZ6HlPdkCJ8/ZRAzEcy ahobhM8w+DBet7dxAkeZUDsk4AuET0RT3JAJ7eUVFVZw/fBtPkq8nWHwOs2alBq6 OCUNX4D5cIaCzaze3n0imF4xCKIfSPkXb1WnfVDCN06pFZOBJ1lMumcrWVBwkFpG 3Sr2nwLJ3iGh5Vwoue29ZNm5zvHj/REtJRSP+tSLsqMfI6bTpQIDAQABo4ID+TCC A/UwHQYDVR0OBBYEFPtKjOPzgQWTsdgWCUPCjKUmoUlmMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8y ODMwMWUwNy0yODI0LTRlMGItOTY1OS1mNWRhODFmODgyMjIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzI4MzAxZTA3LTI4MjQtNGUwYi05 NjU5LWY1ZGE4MWY4ODIyMi8yODMwMWUwNy0yODI0LTRlMGItOTY1OS1mNWRhODFm ODgyMjIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICSfgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAhSOdW/mhpOOKZhkad/pz2yExjfqk GuPQ5jrcEi7eUQz9DX0PeuKQFM2ChXcQ0QOUgToUi777avIBXeTN5sKmGKMSn2RB 02q00sEmfWq+mR+TEtncouY9xls3bV8k7McSI+3LZZvLmGVKj1RkPcV2zr8IWKaN kJyFIpJja7KtjV8fuW84nB2fBsvvrK4rfebnYYjMXkCACTPsdu9ZbHseEsdUy3/A U/jN+BTGLjVmWK4kQ6wnGR56xGFnxm83FaaASKG7rPSbHtcd4w1EFUplsNE6BGu3 WmkDDT5RvpPgbwokNyPM6LgjPfou8Mwi94IFxXaZCFbvIkYyfdV3Hvj94Q== -----END CERTIFICATE-----Generated at Thu May 9 20:34:15 2024 by rpki-client on console-ams.rpki-client.org